Online 300-720 Test Brain Dump Question and Test Engine
Real Cisco 300-720 Exam Dumps with Correct 92 Questions and Answers
Official Study Course for Final Test
If you intend to clear 300-720 exam, you need to prepare adequately for it. There is no better way to pass an exam than to use the recommended study course and understand the different concepts that will be tested in the test. The official training for exam 300-720 is ‘Securing Email with Cisco Email Security Appliance (SESA) v3.1’. This is the class that will teach you how to secure Emails with the Cisco ESA. In particular, the technology helps you to keep your Emails safe from phishing, compromises from external factors, and ransomware. It also helps you learn the art of streamlining your email safety policies. Those who ought to enroll and take it include security engineers, security architects, network administrators, operation engineers, network engineers, and network managers. Others are security or network technicians, system designers, and Cisco integrators & partners. With this course, you will grasp the skills needed in implementing, troubleshooting, as well as administering the Cisco ESA. The major capabilities include advanced protection targeting malware, protection using anti-virus, spam blocking, outbreak filtering, quarantines, encryption, and preventing data loss. You will take a few days to complete this course, regardless of which option you choose from the list below:
- Four days of tutor-guided learning within a classroom set up as well as practicing with lab-based tasks;
- Four days of e-learning, equivalent to the four days of lessons from an instructor, including videos, hands-on tasks, and challenges.
- Four days of learning with guidance from a virtual instructor with practical lessons;
Once you take this class, you will learn the skills you need to use highly available email protection in defending your organization’s email systems against threats that change rapidly. You will also earn the in-demand enterprise security skills and get 24 CE credits that will come in handy during recertification.
NEW QUESTION 53
Which two query types are available when an LDAP profile is configured? (Choose two.)
- A. proxy consolidation
- B. group
- C. user
- D. routing
- E. recursive
Answer: B,D
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/ b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_12_0_chapter_011010.html
NEW QUESTION 54
What is a valid content filter action?
- A. skip antispam
- B. quarantine
- C. decrypt on delivery
- D. archive
Answer: B
NEW QUESTION 55
Which two features are applied to either incoming or outgoing mail policies? (Choose two.)
- A. outbreak filters
- B. Indication of Compromise
- C. antivirus
- D. sender reputation filtering
- E. application filtering
Answer: A,C
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/ b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_01001.html
NEW QUESTION 56
When the Spam Quarantine is configured on the Cisco ESA, what validates end-users via LDAP during login to the End-User Quarantine?
- A. Spam Quarantine End-User Authentication Query
- B. Spam Quarantine Alias Consolidation Query
- C. Spam Quarantine External Authentication Query
- D. Enabling the End-User Safelist/Blocklist feature
Answer: A
Explanation:
Reference:
https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118692-configure- esa-00.html
NEW QUESTION 57
When virtual gateways are configured, which two distinct attributes are allocated to each virtual gateway address? (Choose two.)
- A. domain
- B. DHCP server address
- C. IP address
- D. DNS server address
- E. external spam quarantine
Answer: A,C
NEW QUESTION 58
Which two actions are configured on the Cisco ESA to query LDAP servers? (Choose two.)
- A. reject
- B. accept
- C. delay
- D. route
- E. relay
Answer: B,D
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-0/user_guide_fs/ b_ESA_Admin_Guide_11_0/b_ESA_Admin_Guide_chapter_011010.html
NEW QUESTION 59 
Refer to the exhibit. How should this configuration be modified to stop delivering Zero Day malware attacks?
- A. Apply Prepend on Modify Message Subject under Malware Attachments.
- B. Change Unscannable Action from Deliver As Is to Quarantine.
- C. Configure mailbox auto-remediation.
- D. Change File Analysis Pending action from Deliver As Is to Quarantine.
Answer: C
NEW QUESTION 60
An analyst creates a new content dictionary to use with Forged Email Detection.
Which entry will be added into the dictionary?
- A. ^Alpha\ Beta$
- B. [email protected]
- C. Alpha Beta
- D. mycompany.com
Answer: D
Explanation:
Explanation/Reference: https://www.cisco.com/c/en/us/products/collateral/security/email-security-appliance/ whitepaper_C11-737596.html
NEW QUESTION 61
How does the graymail safe unsubscribe feature function?
- A. It checks the URI reputation and category and allows the content filter to take an action on it.
- B. It redirects the end user who clicks the unsubscribe button to a sandbox environment to allow a safe unsubscribe.
- C. It checks the reputation of the URI and performs the unsubscribe process on behalf of the end user.
- D. It strips the malicious content of the URI before unsubscribing.
Answer: C
Explanation:
Reference:
https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/200383-Graymail- Detection-and-Safe-Unsubscribin.html
NEW QUESTION 62
Email encryption is configured on a Cisco ESA that uses CRES.
Which action is taken on a message when CRES is unavailable?
- A. It is sent in clear text.
- B. It is dropped and an error message is sent to the sender.
- C. It is encrypted by a Cisco encryption appliance.
- D. It is requeued.
Answer: A
NEW QUESTION 63 
Refer to the exhibit. An engineer is trying to connect to a Cisco ESA using SSH and has been unsuccessful.
Upon further inspection, the engineer notices that there is a loss of connectivity to the neighboring switch.
Which connection method should be used to determine the configuration issue?
- A. Telnet
- B. Ethernet
- C. HTTPS
- D. serial
Answer: D
NEW QUESTION 64
A recent engine update was pulled down for graymail and has caused the service to start crashing. It is critical to fix this as quickly as possible.
What must be done to address this issue?
- A. Download another update from the Service Updates page.
- B. Roll back to a previous version of the engine from the Services Overview page.
- C. Download another update from the IMS and Graymail page.
- D. Roll back to a previous version of the engine from the System Health page.
Answer: B
NEW QUESTION 65
Drag and drop the steps to configure Cisco ESA to use SPF/SIDF verification from the left into the correct order on the right.
Answer:
Explanation:
NEW QUESTION 66
An administrator is trying to enable centralized PVO but receives the error, "Unable to proceed with Centralized Policy, Virus and Outbreak Quarantines configuration as esa1 in Cluster has content filters / DLP actions available at a level different from the cluster level." What is the cause of this error?
- A. DLP is not configured on host1.
- B. Content filters are configured at the machine-level on esa1.
- C. DLP is configured at the cluster-level on esa2.
- D. DLP is configured at the domain-level on esa1.
Answer: A
Explanation:
Explanation/Reference: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118026-technote- esa-00.html
NEW QUESTION 67
Which method enables an engineer to deliver a flagged message to a specific virtual gateway address in the most flexible way?
- A. Map the envelope sender address to the host.
- B. Apply a filter on the message.
- C. Issue the altsrchost command.
- D. Set up the interface group with the flag.
Answer: C
NEW QUESTION 68
What must be configured to allow the Cisco ESA to encrypt an email using the Cisco Registered Envelope Service?
- A. content filter to forward the email to the Cisco Registered Envelope server
- B. message encryption from a content filter that select "Message Encryption" over TLS
- C. message encryption from the mail flow policies with "CRES" selected
- D. provisioned email encryption profile
Answer: B
Explanation:
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/ b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_chapter_010010.html
NEW QUESTION 69
Which two components must be configured to perform DLP scanning? (Choose two.)
- A. Add a DLP policy to the Outgoing Content Filter.
- B. Enable a DLP policy on the Outgoing Mail Policy.
- C. Add a DLP policy on the Incoming Mail Policy.
- D. Add a DLP policy to the DLP Policy Manager.
- E. Enable a DLP policy on the DLP Policy Customizations.
Answer: B,D
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/ b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_010001.html
NEW QUESTION 70
Which action on the Cisco ESA provides direct access to view the safelist/blocklist?
- A. Debug the mail flow policy.
- B. Monitor Incoming/Outgoing Listener.
- C. Export the SLBL to a .csv file.
- D. Show the SLBL cache on the CLI.
Answer: C
Explanation:
Reference:
https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/117922-technote- esa-00.html
NEW QUESTION 71
To comply with a recent audit, an engineer must configure anti-virus message handling options on the incoming mail policies to attach warnings to the subject of an email.
What should be configured to meet this requirement for known viral emails?
- A. Positively Identified Messages
- B. Encrypted Messages
- C. Virus Infected Messages
B Unscannable Messages
Answer: A
NEW QUESTION 72
......
Valid 300-720 Test Answers & Cisco 300-720 Exam PDF: https://www.free4torrent.com/300-720-braindumps-torrent.html
Cisco 300-720 Certification Real 2021 Mock Exam: https://drive.google.com/open?id=1Mw1cAQm_z0zYwwztR-TYC5uennNhWZLS